9 matches found
Code injection
An issue was discovered in YzmCMS 5.2.0. It has XSS via the bottom text field to the admin/systemmanage/save.html URI, related to the sitecode parameter...
CVE-2019-9570
An issue was discovered in YzmCMS 5.2.0. It has XSS via the bottom text field to the admin/systemmanage/save.html URI, related to the sitecode parameter...
CVE-2019-9570
An issue was discovered in YzmCMS 5.2.0. It has XSS via the bottom text field to the admin/systemmanage/save.html URI, related to the sitecode parameter...
CVE-2019-9570: Improper Neutralization of Input During Web Page Generation
An issue was discovered in YzmCMS 5.2.0. It has XSS via the bottom text field to the admin/systemmanage/save.html URI, related to the sitecode parameter...
PT-2019-19716
Name of the Vulnerable Software and Affected Versions YzmCMS version 5.2.0 Description An issue was discovered that allows XSS via the bottom text field to the "admin/system manage/save.html" URI, related to the site code parameter. Recommendations For YzmCMS version 5.2.0, as a temporary...
PT-2018-14510
Name of the Vulnerable Software and Affected Versions ServersCheck Monitoring Software versions prior to 14.3.4 Description The issue concerns the presence of Persistent and Reflected XSS in the software. This can be exploited via several parameters, including status, type, device, location, grou...
Cross site scripting
ServersCheck Monitoring Software before 14.2.3 is prone to a cross-site scripting vulnerability as user supplied-data is not validated/sanitized when passed in the settingsSMSALERTTYPE parameter, and JavaScript can be executed on settings-save.html the Settings - SMS Alerts page...
CVE-2017-17832: Improper Neutralization of Input During Web Page Generation
ServersCheck Monitoring Software before 14.2.3 is prone to a cross-site scripting vulnerability as user supplied-data is not validated/sanitized when passed in the settingsSMSALERTTYPE parameter, and JavaScript can be executed on settings-save.html the Settings - SMS Alerts page...
PT-2017-15037
Name of the Vulnerable Software and Affected Versions ServersCheck Monitoring Software versions prior to 14.2.3 Description The issue arises from the lack of validation and sanitization of user-supplied data passed in the settings SMS ALERT TYPE parameter. This allows JavaScript to be executed on...